Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: BbeD/+TO4mVBEJs31iykQgUeMdnRqA2e0NSN6ImffOI=
Subject key identifier: 55:7F:E5:5F:AD:65:7A:7A:64:10:89:A0:23:A6:9A:3F:E4:68:5C:A5
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 019A4E8639E60C1278C8A3A73EEAE91BB895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:10 +0000
Manifest this update: Tue 04 Nov 2025 11:00:10 +0000
Manifest next update: Wed 05 Nov 2025 11:00:10 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: Tt2fHs0oNsCgt0t/IDlG4uNa56WFEUIY0IJjgvIKFtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:39:e6:0c:12:78:c8:a3:a7:3e:ea:e9:1b:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Nov 4 11:00:10 2025 GMT
Not After : Nov 5 11:00:10 2025 GMT
Subject: CN=557fe55fad657a7a641089a023a69a3fe4685ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:38:38:55:71:db:80:2e:bb:2f:69:cd:23:
e3:2e:67:11:f5:7d:12:a2:64:d8:b8:a2:dc:ed:f4:
d7:db:e1:dd:ab:e3:74:89:8b:50:8c:f2:02:48:00:
35:6d:a3:c5:ea:fd:e6:26:f1:9d:35:a7:09:d6:14:
3a:f2:59:2a:0c:cc:fe:77:cc:a2:0b:b5:1d:38:42:
8f:2e:cf:0c:fe:7d:88:dc:8d:82:39:69:52:de:18:
22:d6:a0:7b:0b:ef:6a:48:b6:ff:7d:b6:62:d0:f2:
34:4a:fb:67:72:af:74:12:e3:c2:23:85:12:ba:02:
e8:4d:c8:89:5c:b2:4b:e9:fa:42:06:8c:96:49:6f:
8e:c7:12:0b:86:60:80:a8:03:e0:49:85:2f:91:e9:
7b:34:90:1c:59:60:0e:7e:69:61:bf:09:18:08:07:
17:7c:d0:8d:db:0a:1b:12:0f:e2:6d:5e:ba:a5:b6:
de:bd:41:33:6b:bf:e5:07:7c:dd:71:db:5d:da:b8:
86:91:64:ff:26:bb:96:94:d9:3e:7e:3d:95:19:9c:
97:1f:84:de:04:46:31:4a:46:a3:02:b1:c6:40:bf:
91:ef:4b:84:81:d9:02:20:ac:81:03:c5:83:bb:6c:
5b:32:a1:85:f2:bc:c0:33:55:83:af:dd:74:4f:dc:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:E5:5F:AD:65:7A:7A:64:10:89:A0:23:A6:9A:3F:E4:68:5C:A5
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a7:dd:35:87:03:f7:16:b4:bb:8e:d5:02:c6:6c:fc:10:ff:
37:0e:f1:fc:4b:42:7d:98:e1:dc:9d:61:d1:a6:9f:78:70:e7:
72:70:0e:84:25:a0:c1:2a:2d:a8:74:6d:65:e0:65:70:41:5f:
96:84:d0:0a:73:9d:86:56:d5:e4:49:a3:b4:b3:fb:9b:ab:dc:
2f:05:df:28:7e:59:c6:d8:c2:76:22:99:e4:12:57:30:08:ee:
80:97:90:2c:d3:ae:49:89:a0:88:fa:3b:cd:00:fe:58:04:92:
85:51:88:33:27:2b:bd:b0:4b:95:a4:ef:be:c8:eb:9d:cd:e0:
ae:3f:6d:b3:90:f7:4c:a6:2a:26:1e:c8:95:d5:24:d2:35:aa:
bd:e8:d8:a4:0d:e4:8d:a3:b6:0e:a6:c3:73:f4:b3:6e:e6:08:
10:5c:ff:f6:d9:38:84:88:ab:66:b5:ea:c4:71:0b:66:bb:3e:
9a:b9:56:3f:05:97:ed:99:44:7e:60:5c:f2:68:02:d7:1c:42:
3e:c0:69:0d:49:e4:e7:bd:96:3d:83:c7:aa:14:f0:99:f1:fc:
82:05:39:d3:a5:0c:8a:e6:ef:ea:7a:f4:ab:84:a1:24:40:2b:
9e:f0:64:e4:41:13:09:b4:ff:7e:92:08:de:8d:cf:52:38:58:
2d:5d:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:02 2025 by rpki-client